ipsec: Fix decap of IPSEC/GRE in transport mode 44/24044/1
authorNeale Ranns <nranns@cisco.com>
Wed, 18 Dec 2019 05:54:40 +0000 (05:54 +0000)
committerNeale Ranns <nranns@cisco.com>
Wed, 18 Dec 2019 05:54:40 +0000 (05:54 +0000)
commit568acbb7c980608e238b25b1330d2730b8534599
tree1044b7dc36f8779286d47ae5c6bce6eb977fec77
parent6461b7a319e53490e04e5e59d7909766fca86209
ipsec: Fix decap of IPSEC/GRE in transport mode

Type: fix

in transport mode the header sequence is:
  MAC - IP (tun) - ESP - GRE - L2
so popping the GRE header is done in the ESP decrypt node.

Change-Id: Ia125eb65b9300368617d2bffca09683851e43be0
Signed-off-by: Neale Ranns <nranns@cisco.com>
src/vnet/ipsec/esp_decrypt.c
test/test_ipsec_tun_if_esp.py